A security researcher spent a month to find bad TOR exit nodes by setting up a honey pot kind of website which has a fake login page - To find the nodes that sniffs the traffic and attempts to steal the password. This is very dangerous for those who completely depend on TOR Brows...